Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Yealink VoIP SSL VPN Capabilities

I have been testing a Yealink T21 phone which incorporates settings for OpenVPN SSL in its firmware.  

If I can connect a phone to the UTMs SSLVPN it would simplify connections from dynamic addresses.  I would no longer need to worry about managing SIP and RTP ports for dynamic addresses as they would all be tunneled.

Has anyone been successful in getting a Yealink to connect to the UTM SSL VPN?  One issue I have is with managing user name and password, which it seems I need passed by the phone.


This thread was automatically locked due to age.
Parents
  • HI BangkokBob,

     

    did you find a solution for this?

  • Gents, I managed to get the yealink T21P E2 to work with sophos VPN(SSL).

    see below the config file(vpn.cnf) the order of must be exactly as per below

    client
    dev tun
    proto tcp
    remote xxx.xxx.xxx.xxx 443
    tls-remote "/C=za/L=JHB/O=Company Name/CN=me.domain/emailAddress=me@domain.com"
    route remote_host 255.255.255.255 net_gateway
    resolv-retry infinite
    nobind
    persist-key
    persist-tun
    ca /config/openvpn/keys/ca.crt
    cert /config/openvpn/keys/client1.crt
    key /config/openvpn/keys/client1.key
    auth-user-pass /config/openvpn/keys/auth.cfg
    cipher AES-128-CBC
    auth MD5
    comp-lzo
    route-delay 4
    verb 3
    reneg-sec 0

  • Hello,

    I'm also trying to get a Yealink T41 to work with Sophos VPN(SSL).

    Only a sample vpn.cnf is shown in the thread.

    Could you please briefly document the whole process ?

    From creating the certificates on the sophos utm, including which fields need entering etc. To uploading the files to the phone

    It saves me re-inventing the wheel.

    Thanks.

Reply
  • Hello,

    I'm also trying to get a Yealink T41 to work with Sophos VPN(SSL).

    Only a sample vpn.cnf is shown in the thread.

    Could you please briefly document the whole process ?

    From creating the certificates on the sophos utm, including which fields need entering etc. To uploading the files to the phone

    It saves me re-inventing the wheel.

    Thanks.

Children